Re: [SLUG] More Help requested!

From: Matt Miller (Matt.Miller@mptotalcare.com)
Date: Wed Jul 16 2003 - 17:41:23 EDT


On Wed, 2003-07-16 at 17:23, Mike wrote:
> Ok, it's all about permissions. I had to chmod 755 the
> password file and the directory it resides in, in
> order for it to be readable. (I had previously checked
> httpd/error_log and it said it could not open the
> file). It now works as it should and I can get in.
> But, isn't making a password file 755 dangerous?

Not necessarily dangerous, but password files should not be globally
readable as a general rule. Who owns the password file and directory in
which the file resides?

    $ ls -ld /path_to/password/directory; ls -l \
    /path_to/password/directory/password_file

What user/group is apache running as? Does the apache user and/or group
have read access to the password file?

-- 

Matt Miller Systems Administrator MP TotalCare gpg public key id: 08BC7B06

-- Insanity in individuals is something rare - but in groups, parties, nations and epochs, it is the rule. -- Nietzsche




This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 19:31:06 EDT